ebpftracer

type ActualDestinationGetter interface {
	GetDestination(src, dst netip.AddrPort) (netip.AddrPort, bool)
}

type ArgType uint8

type CgroupClient interface {
	GetCgroupsRootPath() string
	LoadCgroup(id cgroup.ID, path string) bool
	CleanupCgroup(cgroup cgroup.ID)
	IsDefaultHierarchy(uint32) bool
}

type Config struct {
	BTFPath string

	SignalEventsRingBufferSize uint32 `validate:"required"`
	EventsRingBufferSize       uint32 `validate:"required"`
	SkbEventsRingBufferSize    uint32 `validate:"required"`

	EventsOutputChanSize   int
	DefaultCgroupsVersion  string `validate:"required,oneof=V1 V2"`
	DebugEnabled           bool
	AutomountCgroupv2      bool
	ContainerClient        ContainerClient
	CgroupClient           CgroupClient
	SignatureEngine        *signature.SignatureEngine
	MountNamespacePIDStore *types.PIDsPerNamespace
	// All PIPs reported from ebpf will be normalized to this PID namespace
	HomePIDNS            proc.NamespaceID
	AllowAnyEvent        bool
	FileAccessEnabled    bool
	NetflowsEnabled      bool
	NetflowGrouping      NetflowGrouping
	TrackSyscallStats    bool
	ProcessTreeCollector processTreeCollector
	MetricsReporting     MetricsReportingConfig
	PodName              string
}

type ContainerClient interface {
	GetOrLoadContainerByCgroupID(ctx context.Context, cgroup cgroup.ID) (*containers.Container, error)
	AddContainerByCgroupID(ctx context.Context, cgroupID cgroup.ID) (cont *containers.Container, rerrr error)
	CleanupByCgroupID(cgroup cgroup.ID)
}

type EventFilter func(event *types.Event) error

type EventFilterGenerator func() EventFilter

type EventPolicy struct {
	ID                 events.ID
	PreFilterGenerator PreEventFilterGenerator
	FilterGenerator    EventFilterGenerator
	KernelFilters      []KernelEventFilter
}

type EventProbe struct {
	// contains filtered or unexported fields
}

type EventsPolicyConfig struct {
	EnabledEvents []events.ID `json:"enabledEvents"`
}

type FileAccessKey tracerFileAccessKey

type FileAccessStats tracerFileAccessStats

type KernelEventFilter struct {
	Name        string
	Description string
}

type LRUPolicy struct {
	Size int
}

type MetricsReportingConfig struct {
	ProgramMetricsEnabled bool
	TracerMetricsEnabled  bool
}

type NetflowGrouping uint64

type Policy struct {
	SystemEvents    []events.ID // List of events required for internal tasks such as cache cleanup
	SignatureEvents []events.ID
	Events          []*EventPolicy
	Output          PolicyOutputConfig
}

type PolicyOutputConfig struct {
	RelativeTime bool
	ExecHash     bool

	ParseArguments    bool
	ParseArgumentsFDs bool
	EventsSorting     bool
}

type PreEventFilter func(ctx *types.EventContext, decoder *decoder.Decoder) (types.Args, error)

type PreEventFilterGenerator func() PreEventFilter

type RateLimitPolicy struct {
	// If interval is set rate limit can be used as interval based sampling. In such case burst is always 1.
	Interval time.Duration

	// Rate is events per second.
	Rate  float64
	Burst int
}

type SyscallID uint32

type SyscallStats struct {
	ID    SyscallID
	Count uint64
}

type SyscallStatsKeyCgroupID uint64

type TailCall struct {
	// contains filtered or unexported fields
}

type Tracer struct {
	// contains filtered or unexported fields
}

type TracerEventContextT = tracerEventContextT

type TrafficKey tracerIpKey

type TrafficSummary tracerTrafficSummary